Static task
static1
Behavioral task
behavioral1
Sample
e9bce8c8d971806c459fba7e236e0af3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9bce8c8d971806c459fba7e236e0af3_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e9bce8c8d971806c459fba7e236e0af3_JaffaCakes118
-
Size
554KB
-
MD5
e9bce8c8d971806c459fba7e236e0af3
-
SHA1
047c0659a2eb049071e1ff6ac037167fc8c26766
-
SHA256
278dee84390e48828b26024aaf242abdb934c6afe67f7dab55ee5e8e6b593238
-
SHA512
b9a113b191269c8cfe87a0aafdeda30c87903ea9908c8bb8f3b19d486d400b5595add64dd47fdc4bd29558d0238026a878650be26a42b9aa3fcb54d6129c5039
-
SSDEEP
12288:8SqfwSNXjmLqIdKa7lBSvDg1J0kSrBUpdbQFj2u7TJLs2GYwdPwvQy:hqfwSNXjFIV7lBcs1ykSFUpt+1J0YwdA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9bce8c8d971806c459fba7e236e0af3_JaffaCakes118
Files
-
e9bce8c8d971806c459fba7e236e0af3_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 548KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE